Critical Infrastructure Sectors: Energy
A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). The affected software do not properly check privileges between users during the same web browser session, creating an unintended sphere of control. This could allow an authenticated low privileged user to achieve privilege escalation.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
siemens sinec network management system |
||
siemens sinema server 14.0 |